10 threats in this category
Check Point’s weekly bulletin highlights multiple incidents: Toys 'R' Us Canada breach, Askul ransomware disrupting logistics, Verisure data breach via billing partner, LastPass-themed phishing tied t…
Category: Threat Alerts / Threat Intelligence / Threat Intelligence
Google’s TAG reports Coldriver (aka Star Blizzard/Callisto/UNC4057) rapidly replaced its exposed LostKeys malware with a new toolchain: NOROBOT initial payload, YESROBOT backdoor, and MAYBEROBOT succe…
Category: Threat Alerts / Threat Intelligence / Threat Intelligence
Cofense warns that major outages—such as AWS disruptions—are routinely exploited for phishing, spoofed helpdesks, QR scams, and fake patch downloads. Case studies from 2024–2025 show rapid lure adapta…
Category: Threat Alerts / Threat Intelligence / Threat Intelligence
Reporting indicates the Russia‑linked COLDRIVER group shifted from stealer malware to using NOROBOT loaders and NOROBOT→MAYBEROBOT backdoors, simplifying the chain to evade detection while maintaining…
Category: Threat Alerts / Threat Intelligence / Threat Intelligence
Palo Alto Networks Unit 42 tracks Scattered LAPSUS$ Hunters’ extortion activity after their Oct 10 deadline, observing leaks tied to six companies and chatter about an Extortion‑as‑a‑Service model wit…
Category: Threat Alerts / Threat Intelligence / Threat Intelligence
Google Threat Intelligence describes evolving COLDRIVER tradecraft: NOROBOT loaders set logon scripts that fetch a PowerShell‑based MAYBEROBOT backdoor (aka SIMPLEFIX), offering flexible command execu…
Category: Threat Alerts / Threat Intelligence / Threat Intelligence
Check Point Research’s 13 October threat bulletin aggregates multiple high-impact events across sectors. Qilin ransomware claimed responsibility for an intrusion at Asahi (Japan), exfiltrating ~27GB a…
Category: Threat Alerts / Threat Intelligence / Threat Intelligence
Health-ISAC’s Q3 2025 Quarterly Threat Insights highlights intensifying threats to healthcare. Notable trends include the Shai-Hulud worm spreading via malicious npm packages that embed into developer…
Category: Threat Alerts / Threat Intelligence / Threat Intelligence
The Week 40 BlockThreat newsletter tracks roughly $5M in crypto/Web3 losses across six incidents. A notable case is Abracadabra’s third exploit (~$1.8M), attributed to a simple logic flaw—an omitted e…
Category: Threat Alerts / Threat Intelligence / Threat Intelligence
Socket researchers document malicious packages across npm, PyPI, and RubyGems abusing Discord webhooks for stealthy C2 and exfiltration of secrets and host telemetry.
Category: Threat Alerts / Threat Intelligence / Threat Intelligence